Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258751 6.8 警告 マイクロソフト - Windows のサービスのトレース機能における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2554 2010-09-2 14:06 2010-08-10 Show GitHub Exploit DB Packet Storm
258752 6.8 警告 マイクロソフト - Windows のサービスのトレース機能における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2555 2010-09-2 14:06 2010-08-10 Show GitHub Exploit DB Packet Storm
258753 6.8 警告 マイクロソフト - Windwos の TCP/IP スタックにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1893 2010-09-2 14:06 2010-08-10 Show GitHub Exploit DB Packet Storm
258754 9.3 危険 マイクロソフト - Microsoft Office Excel および Open XML File Format Converter における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2562 2010-09-2 14:05 2010-08-10 Show GitHub Exploit DB Packet Storm
258755 9.3 危険 マイクロソフト - Microsoft Windows Movie Maker におけるバッファオーバーフローの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2564 2010-09-2 14:05 2010-08-10 Show GitHub Exploit DB Packet Storm
258756 6.6 警告 マイクロソフト - Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1896 2010-09-2 14:05 2010-08-10 Show GitHub Exploit DB Packet Storm
258757 6.6 警告 マイクロソフト - Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1895 2010-09-2 14:04 2010-08-10 Show GitHub Exploit DB Packet Storm
258758 6.6 警告 マイクロソフト - Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1894 2010-09-2 14:04 2010-08-10 Show GitHub Exploit DB Packet Storm
258759 4.4 警告 マイクロソフト - Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1887 2010-09-2 14:04 2010-08-10 Show GitHub Exploit DB Packet Storm
258760 4.6 警告 マイクロソフト - Microsoft Windows のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1890 2010-09-1 15:19 2010-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197581 6.1 MEDIUM
Network 		wp_google_fonts_project wp_google_fonts The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated us… - CVE-2021-24935 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197582 9.8 CRITICAL
Network 		ays-pro secure_copy_content_protection_and_content_locking The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthent… - CVE-2021-24931 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197583 5.4 MEDIUM
Network 		booking-wp-plugin bookly The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Sit… - CVE-2021-24930 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197584 6.1 MEDIUM
Network 		email_log_project email_log The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue - CVE-2021-24924 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197585 7.5 HIGH
Network 		wpserveur wps_hide_login The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthentic… CWE-863
 Incorrect Authorization 		CVE-2021-24917 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197586 8.0 HIGH
Network 		tawk tawk.to_live_chat The Tawk.To Live Chat WordPress plugin before 0.6.0 does not have capability and CSRF checks in the tawkto_setwidget and tawkto_removewidget AJAX actions, available to any authenticated user. The fir… CWE-352
 Origin Validation Error 		CVE-2021-24914 2024-11-21 14:54 2021-12-7 Show GitHub Exploit DB Packet Storm
197587 5.4 MEDIUM
Network 		my_calendar_project my_calendar The My Calendar WordPress plugin before 3.2.18 does not sanitise and escape the callback parameter of the mc_post_lookup AJAX action (available to any authenticated user) before outputting it back in… - CVE-2021-24927 2024-11-21 14:54 2021-11-29 Show GitHub Exploit DB Packet Storm
197588 5.4 MEDIUM
Network 		smashballoon smash_balloon_social_post_feed The Smash Balloon Social Post Feed WordPress plugin before 4.0.1 did not have any privilege or nonce validation before saving the plugin's setting. As a result, any logged-in user on a vulnerable sit… - CVE-2021-24918 2024-11-21 14:54 2021-11-29 Show GitHub Exploit DB Packet Storm
197589 9.8 CRITICAL
Network 		contest_gallery contest_gallery The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when… - CVE-2021-24915 2024-11-21 14:54 2021-11-29 Show GitHub Exploit DB Packet Storm
197590 4.4 MEDIUM
Local 		sophos exploit_prevention
intercept_x_endpoint
intercept_x_for_server 		A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Soph… CWE-428
 Unquoted Search Path or Element 		CVE-2021-25269 2024-11-21 14:54 2021-11-27 Show GitHub Exploit DB Packet Storm